Conjectured Strong Complementary Information Tradeoff 
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We conjecture a new entropic uncertainty principle governing the entropy of complementary 
observations made on a system given side information in the form of quantum states, generalizing 
the entropic uncertainty relation of Maassen and Ufhnk [Phys. Rev. Lett. 60, 1103 (1988)]. We prove 
a special case for certain conjugate observables by adapting a similar result found by Christandl 
and Winter pertaining to quantum channels [IEEE Trans. Inf. Theory 51, 3159 (2005)], and discuss 
possible applications of this result to the decoupling of quantum systems and for security analysis 
in quantum cryptography. 



One of the central mysteries of quantum mechanics is 
complementarity, the strange phenomenon that a given 
physical attribute can only be exhibited at the expense 
of another, complementary, attribute. The canonical ex- 
ample, wave-particle duality, is illustrated in the dou- 
ble slit experiment. Coherent light (or matter) travelling 
through both slits produces an interference pattern, a 
wave-like property which is however destroyed if one de- 
termines which path has been taken, a particle-like prop- 
erty. Such behavior vividly differentiates quantum from 
classical mechanics and led Feynman to famously observe 
that the double slit experiment "has in it the heart of 
quantum mechanics " [l|. 

The new field of quantum information theory takes a 
pragmatic approach to the mysteries of quantum me- 
chanics, seeking to better understand them by asking 
which information processing tasks can or cannot be ac- 
complished in this new arena. The results have been 
stunning. Quantum information cannot be copied but 
can be "teleported" from place to place. It can be used 
to improve the precision of everything from clock syn- 
chronization to gravitational-wave detectors to lithogra- 
phy. It can dramatically speed up certain computational 
tasks, such as searching an unordered list and factoring 
large integers. Quantum information cannot, however, 
be shared between many parties. For instance, maximal 
entanglement can be shared by only two parties, and en- 
tangling more parties means making the entanglement 
between any two of them weaker. This effect also enables 
cryptographic tasks which are impossible classically, such 
as unconditionally secure key exchange. This property of 
exclusiveness or privacy informs many aspects of how we 
reason about quantum information and quantum infor- 
mation processing [2]. 

The connection between complementarity and privacy 
stems from the entropic uncertainty relation due to 
Maassen and Ufhnk [3(, then successively extended by 
Hall [1] and Cerf et oil. [B|. The original version con- 
strains the entropies of two noncommuting observables 
O a and O a of a system A, and the latter versions ex- 
tend this to explicitly include classical side information 
about the observables, stored either jointly in one ex- 



ternal system R (Hall) or separately in two, B and E 
(Cerf et al.). These external systems might, for example, 
be ancillary systems used in von Neumann measurement 
processes, possibly of O a or O a or both. Giving the B 
and E systems to parties Bob and Eve, respectively (the 
names are chosen in anticipation of the cryptographic 
implications to follow), the complementarity statement 
of Cerf et al. says that the information one party (Bob) 
could obtain about one observable (O a ) by measuring his 
system B, plus the information Eve could obtain about 
the other observable (O a ) by measuring E, cannot ex- 
ceed a prescribed bound. Equivalently, one can say that 
there is a certain unavoidable amount of uncertainty or 
entropy about the two observables conditioned on respec- 
tive measurements of the two systems B and E. 

In this paper we generalize the tradeoff to restrict the 
amount of conditional entropy the parties can have about 
noncommuting observables on A when they possess quan- 
tum side information. Quantum and classical side infor- 
mation behave differently, and in particular the informa- 
tion represented by the quantum state may be signifi- 
cantly larger than the amount of classical information 
that can be extracted from it by measurement, a state- 
ment known as the Holevo bound 0, @| ■ Relatedly, clas- 
sical side information is subject to locking, meaning that 
a modest amount of additional classical side information 
can greatly increase the total 0] ■ Quantum side informa- 
tion, in contrast, cannot be locked in this manner. We 
find numerical evidence for the generalized tradeoff for 
arbitrary observables and provide a proof for conjugate 
observables [19( related by a Fourier transform based on 
the proof of a related entropic inequality for quantum 
channels given by Christandl and Winter . 

We then exhibit a family of states which saturate the 
bound before discussing some applications of our result. 
Building on [1, Q , we derive a rigorous statement of the 
idea that if the AB system has nearly maximal quantum 
correlations, as measured by appropriately small quan- 
tum conditional entropies, then the AE system is nearly 
decoupled, i.e. in a product state. This is akin to the 
monogamy of entanglement, the fact that maximal entan- 
glement cannot be shared by more than two parties, at 
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the level of quantum correlations. In the context of quan- 
tum cryptography, this means composable security — that 
the key generated in quantum key distribution is secure 
in any further cryptographic application 1^, U | — can be 
established by bounding the information that the (quan- 
tum) system B has on a basis conjugate to the basis of 
A used to encode the key. 

Basic entropic uncertainty principles. — We begin by 
reviewing the existing entropic uncertainty principles. 
For aj)hysical system A, consider any two observables O a 
and A represented by operators on a finite-dimensional 
Hilbert space. Let c = max^-fe where \j) and |fe) 

are the eigenvectors of O a and O a , respectively. Define 
H(O a ) p and H(O a ) p to be the respective Shannon en- 
tropies of the outcome probabilities of the measurements 
of A and O a on a given state p A . Maassen and Uffink [3[ 
showed that regardless of p A , 



H(O a ) p + H(O a ) p > -21og 2 c, 



(1) 



meaning the entropies of observables sharing no common 
eigenstates cannot both be arbitrarily small. The con- 
stant c can be as large as log 2 d A , for d A the dimension 
of the Hilbert space describing system A, and is exactly 
log 2 d A if and only if the observables are conjugate. For 
conjugate observables, certainty regarding one observable 
implies complete uncertainty regarding the other. 

Suppose now that we have some side information or 
background information relevant to A, for instance the 
result of measurement on some external system R which 
is correlated with A. Intuitively, the entropic uncer- 
tainty relation should still hold, since this information 
would simply factor into the description p A of A. In- 
deed, the entropic uncertainty principle can be adapted 
to this case, and is equivalent to a result by Hall which he 
terms the information-exclusion principle [J]. Its deriva- 
tion proceeds as follows. 

Consider an arbitrary bipartite quantum state p AR 
where A and R are two finite dimensional Hilbert spaces. 
Let T R be a positive operator-valued measure (POVM) 
representing an arbitrary measurement on the system 
R (i.e. J2j T f = lR and r f > for a11 3)- Mea- 
surement of T R gives the outcome j with probability 
qj = Tr[p AR T R ] , and leaves the marginal state of A given 
by pf := ±TT R [p AR T R ] Applying the inequality 

Eq.[T]to each of the states p 3 gives H(0 A ) Pj +H(d A ) Pj > 
— 2 log 2 c, where the entropies are computed using the 
conditional state pj. Since this state is determined by 
the classical outcome of measurement on R, we can write 
H{O a ) P] as H{0 A \Tf) p and likewise for observable O a , 
where H(O a \T r ) p is the conditional entropy of the A 
observable given the result of the T R measurement. Aver- 
aging over all outcomes yields the information exclusion 
principle: 



This equation is particularly useful if we consider R 
to be a composite system, consisting of subsystems B 
and E, and T R to be a composite measurement T R k = 

A^ (g) A®, as put forth in [5|. Since conditioning re- 
duces entropy, one obtains a tradeoff in the amount of 
information about O a and O a which can be simultane- 
ously stored in separate auxiliary systems B and E. We 
call this the (weak) complementary information tradeoff 
(CIT): 



H(O a \A b ) p + H(O a \K e ) p > -21og 2 



(3) 



Now the information held by one party, in possession 
of system B, say, limits the information which another 
party could in principle obtain about a noncommuting 
observable. This tradeoff is immediately applicable in 
quantum cryptography, and in [13] we used it to motivate 
a new approach to the distillation of entanglement and 
secret keys. Our present goal is to find a stricter tradeoff. 

Strong Complementary Information Tradeoff. — What 
if we regard the quantum state of the auxiliary sys- 
tem itself as the side information? Is there any limit 
to the uncertainty of complementary observables in this 
case? One might conjecture that the quantum version of 
Eq. ([2]) holds, replacing the conditional Shannon entropy 
H(O a \T R ) with the conditional von Neumann entropy 
S{O a \R) p = S{p A1 i)~S{p R ), where p AR is the quantum 
state obtained after measuring the observable O on the 
state p and averaging over all outcomes. However, this is 
false in general. To take an extreme example, the singlet 
state of two spin-i particles is perfectly anticorrelated 

in every basis, meaning that S(O a \R) = S(O a \R) = 
for any nondegenerate observables. This is merely the 
statement that quantum correlations, in the form of en- 
tanglement, are stronger than classical correlations. 

Instead, the conjecture should be applied to the weak 
CIT, Eq. (3]), and the result is the strong CIT: 



S(O a \B) p + S(0 A \E) p > -2 log 2 c. 



(4) 



H(O a \Y r ) p 



H(0 A \T R ) P > 



-21og 2 



(2) 



The strong CIT immediately implies the weak CIT via 
the Holevo bound S(O a \T B ) > S(O a \B) for any mea- 
surement r 0, [H, and also the original entropic uncer- 
tainty principle by taking B and E to be one-dimensional. 

The claim is supported by numerical investigation of 
small dimensions dA,ds,dE < 12, which has found 
no counterexample when testing at least 2000 random 
states in each of the ll 3 combinations of dimensions. 
By itself this is relatively weak evidence, but for conju- 
gate observables A , O a related by a Fourier transform, 
e.g. O a = F A A F A \ Eq. §4§ follows from strong subad- 
ditivity (SSA) of the von Neumann entropy. Assuming 
that the eigenvectors of O a define a standard basis, we 
can redefine the eigenvalues of the observables so that 

o -» z = Efc wfe |fe)( fc l and -> x = E k \ k + l )JMi 

where ui = e 2wi / d , the generalized Pauli operators [2l| . 
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Then the various properties of X and Z can be used to 
construct a proof, in a manner entirely similar to 
who establish a similar tradeoff for the ability of a quan- 
tum channel to transmit conjugate information. In the 
present context, the proof goes as follows. 

Proof of special case. Consider any p ABE where 
dim(j4) = d. We can assume that p ABE is a pure 
state without loss of generality, since E can always be 
redefined to include the purification. As a consequence 
of SSA, the value of S(O a \E) p cannot be increased 
by enlarging E (cf. Q, Theorem 11.15). So if the 
inequality is true for any pure state then it must also 
be true for any mixed state. Using the properties of 
X and Z one can write p AB A E = ± £ fc X A p ABE ] X\ A 

and p ABE = \T.k Z kP ABEz l A - Here we have used 
a nonstandard notation, defining X A :— (X A ) k and 

Z A := (Z A ) k . Now let p ABE := X A Z A p ABE ^ A ^ A 
and define 



qA'B'AB :=-l£if ( 



B' , 



AB 
Pjk , 



(5) 



for Pj = A' and B' are two new systems such 

that dim(yl') = dim(_B') = d. The sum of j and k is 
understood to be over all values from 1 to d. Direct 
calculation shows that 

S(A'\AB) n = S(p AB ) - S(p B ) = S(Z A \B) p (6) 
S{B'\AB) n - S(p AB A ) - S(p B ) = S(X A \B) P (7) 



S(A'B'\AB) n = log 2 d + S(A\B) P . 



(8) 



Strong subadditivity is just the statement that 
S{A'B'\AB) < S(A'\AB) + S(B'\AB) (cf. [2], Theorem 
11.16), so 

S(Z A \B) P + S(X A \B) P > log 2 d + S(A\B) P . (9) 

Define the probability distribution pk and quantum 
states \ Vk ) BE such that \p) ABE = £ fe ^p~k\k) A \<p k ) BE . 



Using S(p AB ) 

Yl<kPkS( l Pk) = S(P A a), a simple calculation reveals that 
S(Z A \B) P -S(Z A \E) P 
bitrary pure p ABE , 



H{Pk) + EkPkS&l 3 ) = H(p k ) 
pie calculation reveals 1 
S(A\B) p and hence for an ar- 



S{X A \B) p + S{Z A \E) p >\og 2 d. 



□ 



Saturating the Bound. — Since the bound relies solely 
on SSA, saturating the bound means fulfilling the SSA 
equality conditions. A useful form of these is given in [l3j ]. 
which states in the present case that the AB state space 
must decompose as 7i AB ~ Q) s H Ls <£> TL Rs , so that 



n A ' B ' AB =($r s a A ' 1 



.B'R S 



(10) 



for some states a A Lb , uj b Rb and probabilities r s 
Projecting A'B' onto the jkth outcome gives pjk = 



where a- 



Tr[P/ 



and sim- 



ilarly for cu k s . Thus. 



the action of X A and Z A on p AB 
must be on different subsystems within each s-sector. 

One way to arrange for this is to take p AB to be one 
of the Bell-states \$ jk ) AB = ^X B Z B (\00) + \ll)) AB . 
Then there is only one s-sector, and the spaces H L , H R 
are two-dimensional, so that \&j k ) — \jk). Bell states 
saturate the bound in the most trivial manner possible: 
both S(X A \B) and S(Z A \B) = 0. 

A more interesting example is afforded by the 
state \ip) ABE = - 1 qY,k\ k ) A \ l Pk) BE , where we set 

Wk) BE = EuvV^\ u ) B \Vuv) El Z E2 \v) E * with arbi- 
trary states \r/ u , v } and distribution q uv . Here the en- 
tropies S(X A \B) and S(Z A \E) do not necessarily take 
on extremal values, but their counterparts S(Z A \B) 
and S{X A \E) do. For starters, S{Z A \B) = log 2 d 
since (p B is independent of k. Meanwhile, S(X A \E) = 
can be quickly derived by making the substitution 



A 7 E2 \„\ E 2 



\k) A Z, 



z A \ky 



in the definition of 



Thus, the p AB derived from meet the equality condi- 
tions, and therefore S(X A \B) + S(Z A \E) = log 2 d. 

In more concrete terms, the p AB meet the equal- 
ity conditions because ijj AB — ^ v qvP A <8> Cif: with 
= J2uu> ^/Qu^u'iv (Vuv\vwv)\u)(u'\ B . Thus, the ac- 
tion of X A has no effect on ifj AB , as it is already diag- 
onal in the X A basis. Therefore we need only keep one 
s-sector and can dispense entirely with TC La in the de- 
composition of p AB , setting H Rs — H AB . It remains 
an open question whether any state can saturate the 
bound S(X A \B) + S{Z A \E) > log 2 d and its counter- 
part S{Z A \B) + S(X A \E) > log 2 d without taking on 
extremal values in either case. 

Privacy Criterion. — An immediate application of the 
strong CIT is in bounding the correlations between two 
systems A and E, possessed by Alice and Eve, respec- 
tively, using the known correlations between A and B, 
possessed by Bob. The weak form can also be used for 
this purpose, but the types of correlations that can be 
bounded are weaker as we now explain. 

Consider the state p ABE and suppose that there exists 
a measurement A B such that H(O a \A b ) p < e. This 
implies H(O a \A e ) p > — 21og 2 c— e, or equivalently, 
I(0 A :A E ) < e + H{0 A ) P + 21og 2 c. Supposing further 
that H(O a ) p < — 21og 2 c, as would necessarily be the 
case for conjugate observables, we obtain a bound on 
Eve's information about A : I(0 A :A E ) < e. Applied 
to a quantum key distribution scenario where Alice's key 
is given by the measurement of the observable A , this 
ensures a certain level of privacy of the key [Bj]. However, 
due to locking, this security criterion is not universally 
composable [141 ] . meaning that the key cannot be safely 
used in arbitrary further cryptographic protocols. For a 
precise definition of universal composability and an ex- 
haustive explanation on why a suitable security criterion 
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should be composable, see 1(J 11 1 ■ 

On the other hand, the strong CIT can be used to 
obtain a composable security criterion. The same condi- 
tions as above now imply that the eavesdropper's Holcvo 
information is small, I(Q A :E) < e, which is a composable 
security criterion [lfj . We can use the strong CIT to give 
an even more direct statement, in the form of sufficient 
conditions for decoupling Alice from Eve. 



ABE 



Decoupling Theorem. Suppose p 
tite state subject to the conditions S{p A ) 
S{0 A \B) P < e 1; and S{O a \B) p < e 2 . Then 



< 



Tr 



e 2 . 



a tripar- 
-21og 2 c, 



(11) 



Proof. The proof assumes that the strong CIT holds for 
the observables A and O a . Observe that the mixed 
state case follows from the pure state case since the 
trace distance cannot increase when removing the pu- 
rifying system. Thus, we can assume that p ABE is 
a pure state. Then a straightforward calculation re- 
veals that S{O a \E) p = S(A\E) p + S(O a \B) p , using the 
fact that given the value of O a , the entropy of Eve's 
state is identical to the entropy of Bob's state. Us- 
ing this to substitute for S(O a \E) p in the strong com- 
plementary information tradeoff, the three given condi- 
tions yield S(p A ) - S{A\E) p < e x + e 2 . This can be 
written as S(p AE \ \p A <8> p E ) < e\ + e 2 , and since the 
relative entropy and the trace distance are related by 
(Tr\p AE _ p A (g)p E^2< AS(p AE \\p A ® p E ) 0, this con- 
cludes the proof. □ 



This theorem makes rigorous the intuition that full 
quantum correlations, in the sense of small quantum con- 
ditional entropy, between two systems A and B is equiv- 
alent to being decoupled from any other system E. The 
same intuition has different, though related, rigorous ex- 
pressions. When thinking of quantum correlations as en- 
tanglement, t his g oes under the heading of monogamy of 
entanglement [1 61 ] - Or, instead of using quantum mutual 
information, one can imagine there exist measurements 
on B which could predict both the outcome of X A and 
Z A , and the same sort of decoupling result holds H, 17j |. 

Conclusion. — We have proposed a tradeoff in the 
amount of information simultaneously available about 
complementary observables, formulated in terms of the 
quantum conditional entropy. It can be seen as the nat- 
ural extension of the reformulation by Cerf et al. of the 
information exclusion principle and the entropic uncer- 
tainty principle. It is also the "static" version, applica- 
ble to quantum states, of Christandl and Winter's "dy- 
namic" conjugate information tradeoff, which is formu- 
lated for quantum channels. The proof of the latter leads 
immediately to a proof of the strong complementary in- 
formation tradeoff, and numerical investigation reveals 
that the tradeoff appears to hold for arbitrary observ- 
ables. We have also discussed conditions under which 



the tradeoff can be saturated, as well as described some 
applications to quantum cryptography and derived a de- 
coupling criterion for quantum states. 

It would be interesting to determine if a similar bound 
holds for the smoothed conditional min- and/or max- 
entropies, which are generalizations of the classical Renyi 
entropes of order oo and 1/2, respectively, and have di- 
rect operational interpretations [18[ . They are often rele- 
vant in studying information processing protocols at the 
single-shot rather than asymptotic level, and are there- 
fore more fundamental. Note that the original derivation 
of Maassen and Uffink already gives the unconditional 
result H min + H max > -2 log 2 c. 
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